OpenBSD 7.3 is released.

DracoSentien · 04-17-2023, 12:23 PM

Quote:

Originally Posted by YesItsMe

Random finding post-installation: pkg_add could fail because of Perl version mismatch:

Solution: rm -rf /usr/local/libdata/perl5/*. If you're not sure, rename the folder instead.

Who else is having that 'problem' ? sounds like a snapshot issue or something not a stable final release issue. Did you check that the installation media was not corrupted if installing from scratch ?

I am running -current but I am going to install 7.3 in a few minutes and somehow I doubt I will run into that 'issue' but I haven't checked the mailing lists, honestly.

YesItsMe · 04-17-2023, 02:33 PM

Quote:

Originally Posted by DracoSentien

I doubt I will run into that 'issue' but I haven't checked the mailing lists, honestly.

I guess it happens when you used CPAN. Theo commented on that once:
https://www.mail-archive.com/bugs@op.../msg16599.html

YesItsMe · 05-02-2023, 02:59 PM

Syspatch 001 (all architectures):
A new ASPA object appeared in the RPKI ecosystem and exposed bugs in bgpd(8) and rpki-client(8).

YesItsMe · 05-16-2023, 05:13 PM

Syspatch 002 (all architectures):
Avoid fatal errors in bgpd(8) due to incorrect refcounting and mishandling of ASPA objects. Fix bgpctl(8) 'show rib in' by renaming 'invalid' into 'disqualified'.

YesItsMe · 05-27-2023, 07:10 PM

Syspatch 003 (all architectures):
IP address inheritance was handled incorrectly in rpki-client(8).

Syspatch 004 (all architectures):
A double free or use after free could occur after SSL_clear(3).

hitest · 06-20-2023, 10:01 AM

005: SECURITY FIX: June 15, 2023 All architectures

https://www.openbsd.org/errata73.html

YesItsMe · 07-12-2023, 09:25 AM

Syspatch 006 (all architectures):
Incorrect length handling of path attributes in bgpd(8) can lead to a session reset.

Syspatch 007 (all architectures):
A malformed HTTP request can crash httpd(8), if fastcgi is in use.

Syspatch 008 (all architectures):
Incomplete validation of ELF headers in execve(2).

Syspatch 009 (all architectures):
When tracking nexthops over IPv6 multipath routes, or when receiving a NOTIFICATION while reaching an internal limit, bgpd(8) could crash.

////// · 07-12-2023, 10:02 AM

thanks for the heads up.

YesItsMe · 07-12-2023, 10:12 PM

You’re welcome. Always glad to be useful.

YesItsMe · 07-19-2023, 04:04 PM

Syspatch 010 (all architectures):
In ssh-agent(1)'s PKCS#11 provider support, remote execution was possible due to controllable access in low-quality libraries. In addition to fixing this, the ability to remotely load PKCS#11 libraries is now disabled by default (re-enable with '-Oallow-remote-pkcs11').

hitest · 07-22-2023, 10:04 AM

Thank you. All updated.

Code:

OpenBSD puffy.darkstar.home 7.3 GENERIC.MP#0 amd64

YesItsMe · 07-24-2023, 06:13 PM

Heh. At least the uname never changes.

YesItsMe · 07-24-2023, 10:23 PM

AMD has a fuckup again. OpenBSD fixed it.

Syspatch 011 (amd64, i386):
Workaround for Zenbleed AMD cpu problem. For i386 and amd64 platforms.

Syspatch 012 (amd64, i386):
Add firmware for AMD cpus, to repair past or potential future bugs. For i386 and amd64 platforms.
After this step, "fw_update" and "installboot" must be run.

Syspatch 013 (amd64, i386):
Install firmware updates for AMD cpus, to repair past or potential future bugs. For i386 and amd64 platforms.

Syspatch 014 (all architectures):
Missing bounds check in console terminal emulation could cause a kernel crash after receiving specially crafted escape sequences.

YesItsMe · 07-25-2023, 07:09 PM

Syspatch 015 (amd64, i386):
Some hypervisors remain unpatched for writes to Zenbleed DE_CFG bit, so skip it.

YesItsMe · 09-20-2023, 04:49 PM

Syspatch 016 (all architectures):
npppd(8) could crash by a l2tp message which has an AVP with wrong length.